Bloqueo de Porn II

[david_domh]

Código (cpp) [Seleccionar] Expandir

/ip proxy
set enabled=yes
set src-address=0.0.0.0
set port=8080
set parent-proxy=0.0.0.0
set parent-proxy-port=0
set cache-administrator="webmaster"
set max-cache-size=none
set cache-on-disk=no
set max-client-connections=600
set max-server-connections=600
set max-fresh-time=3d
set always-from-cache=no
set cache-hit-dscp=4
set serialize-connections=no

Código (cpp) [Seleccionar] Expandir

/ip firewall nat
add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=8080

Código (cpp) [Seleccionar] Expandir

/ip firewall filter
add chain=input in-interface=ether2 protocol=tcp dst-port=8080 action=drop

[david_domh]

Mi lista Negra q me funciona muy bien ( este List contiene paginas porno y bloquea todas las descargas y paginas de videos online q hacen pesada la red )

Código (cpp) [Seleccionar] Expandir


/ip proxy access
add action=deny disabled=no dst-port="" path=*.exe redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-port="" path=*.iso redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-port="" path=*.rar redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-port="" path=*.mp4 redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-port="" path=*.mpg redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-port="" path=*.mp3 redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-port="" path=*.avi redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-port="" path=*.mpeg redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-port="" path=*.wmv redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-port="" path=*.wma redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-port="" path=*.mov redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-port="" path=:3gp redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-port="" path=*.mkv redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:mips dst-port="" path="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:pirlotv dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:cholo dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:porn dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:peliculas dst-port="" path="" \
   redirect-to=www.google.com.pe
add action=deny disabled=no dst-host=:cine dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:video dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:pelicula dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:peli dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:pelis dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:cams dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:cines dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:sex dst-port="" path="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:sexo dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:pelix dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:tv dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:cam dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:porno dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:vk dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:vimple dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:series dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:coreanas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:estreno dst-port="" path="" \
   redirect-to=www.google.com.pe
add action=deny disabled=no dst-host=:estrenos dst-port="" path="" \
   redirect-to=www.google.com.pe
add action=deny disabled=no dst-host=:movies dst-port="" path="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:sex dst-port="" path="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:xx dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:blogspot dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:xxx dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:flv dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:hentai dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:videozer dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:anime dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:rubias dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:gratis dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:cerdas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:tops dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:desnudas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:gay dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:gays dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:cuca dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:petardas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:divx dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:filebox dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:jwplayer dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:naruto dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:ball dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:softonic dst-port="" path="" \
   redirect-to=www.google.com.pe
add action=deny disabled=no dst-host=:vidvux dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:uptobox dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:limevideo dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:donevideo dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:shared dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:vidup dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:tetonas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:culonas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:lesbianas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:amonshare dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:4upfiles dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:videozed dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:hulu dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:vimeo dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:brothersoft dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:uptodown dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:portalprogramas dst-port="" \
   redirect-to=www.google.com.pe
add action=deny disabled=no dst-host=:todoprogramas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:gigadescargas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:descargas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:dalealplay dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:putas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:erotico dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:eros dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:folladas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:culo dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:culos dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:sendspace dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:red dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:jizz dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:ass dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:cnet dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:keez dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:catcher dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:ares dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:hard dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:conejox dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:jovencitas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:violadas dst-port="" redirect-to=\
   www.google.com.pe
add action=deny disabled=no dst-host=:girls dst-port="" redirect-to=\
   www.google.com.pe

[tonyvzla]

Oye amigo, en tu red bloqueas casi todas las descargas exe. mp3 etc etc, tus clientes estan conformes?

[david_domh]

cuando mis clientes observan que no se hace descargas es mejor asi todos estan seguros que los juegos online que jugaran estarà seda o sin nada de lag

Saludos


David M

[RooTDoWN]

La forma más eficiente (menos intensiva en uso de recursos del servidor) de bloquear dominios es a nivel de DNS, no a nivel de proxy http.
Utilizando una regla de iptables para forzar el tráfico DNS por el del servidor DNS que se quiera utilizar con los dominios bloqueados.
Como servidor DNS ligero que redirige las peticiones DNS y bloquea los dominios deseados se puede utilizar "dnsmasq".
También se puede utilizar un servidor DNS externo que ya esté configurado para bloquear los dominios de adultos, como OpenDNS, aunque es de pago, tiene una versión gratuita.

[hardcool]

Dicha regla solo funciona con webproxy cierto? porque corriendo el thunder o raptor no tiene efecto.